🇹🇼
34.81.42.7
9 hours ago
2026/10/07 15:53:07 [error] 4066018#4066018: *105815 FastCGI sent in stderr: "Primary script unknown ...
show more
2026/10/07 15:53:07 [error] 4066018#4066018: *105815 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 34.81.42.7, server: kocerroxy.com, request: "POST /lib/terminal-xhr.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
2026/10/07 15:53:07 [error] 4066018#4066018: *105815 access forbidden by rule, client: 34.81.42.7, server: kocerroxy.com, request: "GET /.vite/manifest.json HTTP/1.1", host: "kocerroxy.com"
34.81.42.7 - - [07/Oct/2026:15:53:07 +0000] "POST /lib/terminal-xhr.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
2026/10/07 15:53:07 [error] 4066018#4066018: *105815 access forbidden by rule, client: 34.81.42.7, server: kocerroxy.com, request: "GET /dist/.vite/manifest.json HTTP/1.1", host: "kocerroxy.com"
2026/10/07 15:53:09 [error] 4066018#4066018: *105815 FastCGI sent in stderr: "Pri
...
show less
Web App Attack
🇩🇪
34.40.59.136
9 hours ago
2026/10/07 15:47:10 [error] 4064941#4064941: *105449 access forbidden by rule, client: 34.40.59.136, ...
show more
2026/10/07 15:47:10 [error] 4064941#4064941: *105449 access forbidden by rule, client: 34.40.59.136, server: kocerroxy.com, request: "GET /dist/.vite/manifest.json HTTP/1.1", host: "kocerroxy.com"
2026/10/07 15:47:10 [error] 4064941#4064941: *105493 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 34.40.59.136, server: kocerroxy.com, request: "POST /lib/terminal-xhr.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
2026/10/07 15:47:10 [error] 4064941#4064941: *105493 access forbidden by rule, client: 34.40.59.136, server: kocerroxy.com, request: "GET /.vite/manifest.json HTTP/1.1", host: "kocerroxy.com"
34.40.59.136 - - [07/Oct/2026:15:47:10 +0000] "POST /lib/terminal-xhr.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
2026/10/07 15:47:11 [error] 4064941#4064941: *105495 FastCGI sent in stderr: "Primary script unknown" while re
...
show less
Web App Attack
🇧🇷
35.198.6.118
9 hours ago
35.198.6.118 - - [07/Oct/2026:15:37:23 +0000] "POST /lib/terminal-xhr.php HTTP/1.1" 404 47 "-" "Mozi ...
show more
35.198.6.118 - - [07/Oct/2026:15:37:23 +0000] "POST /lib/terminal-xhr.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
2026/10/07 15:37:23 [error] 4063648#4063648: *104796 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 35.198.6.118, server: kocerroxy.com, request: "POST /lib/terminal-xhr.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
2026/10/07 15:37:23 [error] 4063648#4063648: *104793 access forbidden by rule, client: 35.198.6.118, server: kocerroxy.com, request: "GET /.vite/manifest.json HTTP/1.1", host: "kocerroxy.com"
2026/10/07 15:37:23 [error] 4063648#4063648: *104886 access forbidden by rule, client: 35.198.6.118, server: kocerroxy.com, request: "GET /dist/.vite/manifest.json HTTP/1.1", host: "kocerroxy.com"
2026/10/07 15:37:26 [error] 4063649#4063649: *104887 access forbidden by
...
show less
Web App Attack
🇦🇺
20.92.77.159
9 hours ago
2026/10/07 15:21:39 [error] 4058115#4058115: *103503 FastCGI sent in stderr: "Primary script unknown ...
show more
2026/10/07 15:21:39 [error] 4058115#4058115: *103503 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.92.77.159, server: kocerroxy.com, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "adminpanel.kocerroxy.com"
20.92.77.159 - - [07/Oct/2026:15:21:39 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 47 "-" "-"
2026/10/07 15:21:40 [error] 4058115#4058115: *103503 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.92.77.159, server: kocerroxy.com, request: "GET /this_is_a_new_hello_world.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "adminpanel.kocerroxy.com"
20.92.77.159 - - [07/Oct/2026:15:21:40 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 47 "-" "-"
2026/10/07 15:21:40 [error] 4058115#
...
show less
Web App Attack
🇯🇵
104.46.232.28
12 hours ago
2026/10/07 13:01:09 [error] 4048193#4048193: *95242 FastCGI sent in stderr: "Primary script unknown" ...
show more
2026/10/07 13:01:09 [error] 4048193#4048193: *95242 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 104.46.232.28, server: kocerroxy.com, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
2026/10/07 13:01:09 [error] 4048193#4048193: *95242 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 104.46.232.28, server: kocerroxy.com, request: "GET /this_is_a_new_hello_world.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
2026/10/07 13:01:09 [error] 4048193#4048193: *95242 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 104.46.232.28, server: kocerroxy.com, request: "GET /3PJcpMFsD8B.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakoc
...
show less
Web App Attack
🇺🇸
74.7.229.157
12 hours ago
2026/10/07 12:40:05 [error] 4045722#4045722: *93821 FastCGI sent in stderr: "Primary script unknown" ...
show more
2026/10/07 12:40:05 [error] 4045722#4045722: *93821 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 74.7.229.157, server: kocerroxy.com, request: "GET /bgbagbcw.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
74.7.229.157 - - [07/Oct/2026:12:40:05 +0000] "GET /bgbagbcw.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot"
74.7.229.157 - - [07/Oct/2026:12:43:13 +0000] "GET /class.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot"
2026/10/07 12:43:13 [error] 4045722#4045722: *93944 FastCGI sent in stderr: "Primary script unknown" while reading response header from upst
...
show less
Web App Attack
🇺🇸
74.7.228.244
12 hours ago
2026/10/07 12:13:38 [error] 4037572#4037572: *92172 FastCGI sent in stderr: "Primary script unknown" ...
show more
2026/10/07 12:13:38 [error] 4037572#4037572: *92172 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 74.7.228.244, server: kocerroxy.com, request: "GET /kgblegacy.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "adminpanel.kocerroxy.com"
74.7.228.244 - - [07/Oct/2026:12:13:38 +0000] "GET /kgblegacy.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot"
2026/10/07 12:21:35 [error] 4044897#4044897: *92457 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 74.7.228.244, server: kocerroxy.com, request: "GET /jybkxer.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "adminpanel.kocerroxy.com"
74.7.228.244 - - [07/Oct/2026:12:21:35 +0000] "GET /jyb
...
show less
Web App Attack
🇳🇱
195.178.110.94
13 hours ago
2026/10/07 11:07:18 [error] 4036678#4036678: *87714 access forbidden by rule, client: 195.178.110.94 ...
show more
2026/10/07 11:07:18 [error] 4036678#4036678: *87714 access forbidden by rule, client: 195.178.110.94, server: kocervpn.com, request: "GET /.auth.json HTTP/1.1", host: "kocervpn.com", referrer: "https://www.kocervpn.com/.auth.json"
2026/10/07 11:07:20 [error] 4036678#4036678: *87714 access forbidden by rule, client: 195.178.110.94, server: kocervpn.com, request: "GET /.aws/config HTTP/1.1", host: "kocervpn.com", referrer: "https://www.kocervpn.com/.aws/config"
2026/10/07 11:07:20 [error] 4036678#4036678: *87714 access forbidden by rule, client: 195.178.110.94, server: kocervpn.com, request: "GET /.config/gcloud/configurations/config_default HTTP/1.1", host: "kocervpn.com", referrer: "https://www.kocervpn.com/.config/gcloud/configurations/config_default"
2026/10/07 11:07:20 [error] 4036678#4036678: *87714 access forbidden by rule, client: 195.178.110.94, server: kocervpn.com, request: "GET /.circleci/ssh-config HTTP/1.1", host: "kocervpn.com", referrer: "https://www.kocervpn.com/.circlec
...
show less
Web App Attack
🇯🇵
40.74.77.37
14 hours ago
2026/10/07 10:58:44 [error] 4036355#4036355: *86773 FastCGI sent in stderr: "Primary script unknown" ...
show more
2026/10/07 10:58:44 [error] 4036355#4036355: *86773 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 40.74.77.37, server: kocerroxy.com, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
40.74.77.37 - - [07/Oct/2026:10:58:44 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 47 "-" "-"
2026/10/07 10:58:45 [error] 4036355#4036355: *86773 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 40.74.77.37, server: kocerroxy.com, request: "GET /this_is_a_new_hello_world.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
40.74.77.37 - - [07/Oct/2026:10:58:45 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 47 "-" "-"
2026/10/07 10:58:45 [error] 4036355#4036355: *86773 FastCGI sent
...
show less
Web App Attack
🇧🇬
88.80.150.176
14 hours ago
2026-10-07T10:07:15.838939+00:00 kocer-main-webserver sshd[4031611]: Invalid user admin from 88.80.1 ...
show more
2026-10-07T10:07:15.838939+00:00 kocer-main-webserver sshd[4031611]: Invalid user admin from 88.80.150.176 port 44142
2026-10-07T10:07:23.458486+00:00 kocer-main-webserver sshd[4031616]: Invalid user admin from 88.80.150.176 port 54624
2026-10-07T10:07:24.368116+00:00 kocer-main-webserver sshd[4031620]: Invalid user admin from 88.80.150.176 port 60768
...
show less
Brute-Force
SSH
🇺🇸
198.46.87.192
15 hours ago
2026/10/07 09:47:48 [error] 4029656#4029656: *82362 access forbidden by rule, client: 198.46.87.192, ...
show more
2026/10/07 09:47:48 [error] 4029656#4029656: *82362 access forbidden by rule, client: 198.46.87.192, server: kocerroxy.com, request: "GET /.env.backup HTTP/1.1", host: "app.kocerroxy.com"
2026/10/07 09:47:49 [error] 4029656#4029656: *82362 access forbidden by rule, client: 198.46.87.192, server: kocerroxy.com, request: "GET /.env.save HTTP/1.1", host: "app.kocerroxy.com"
2026/10/07 09:47:50 [error] 4029656#4029656: *82362 access forbidden by rule, client: 198.46.87.192, server: kocerroxy.com, request: "GET /.env.prod HTTP/1.1", host: "app.kocerroxy.com"
2026/10/07 09:47:50 [error] 4029656#4029656: *82362 access forbidden by rule, client: 198.46.87.192, server: kocerroxy.com, request: "GET /.env.production HTTP/1.1", host: "app.kocerroxy.com"
2026/10/07 09:47:51 [error] 4029656#4029656: *82362 access forbidden by rule, client: 198.46.87.192, server: kocerroxy.com, request: "GET /.env.staging HTTP/1.1", host: "app.kocerroxy.com"
...
show less
Web App Attack
🇺🇸
74.7.229.162
19 hours ago
74.7.229.162 - - [07/Oct/2026:04:57:19 +0000] "GET /f5.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Macint ...
show more
74.7.229.162 - - [07/Oct/2026:04:57:19 +0000] "GET /f5.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot"
2026/10/07 05:07:01 [error] 3997728#3997728: *64415 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 74.7.229.162, server: kocerroxy.com, request: "GET /admin.php/go.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
74.7.229.162 - - [07/Oct/2026:05:07:01 +0000] "GET /admin.php/go.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot"
2026/10/07 05:09:16 [error] 3997728#3997728: *64651 FastCGI sent in stderr: "Primary script unknown" while reading response header from
...
show less
Web App Attack
🇵🇰
182.181.231.106
20 hours ago
2026/10/07 04:22:23 [error] 3996601#3996601: *61160 FastCGI sent in stderr: "Primary script unknown" ...
show more
2026/10/07 04:22:23 [error] 3996601#3996601: *61160 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 182.181.231.106, server: kocerroxy.com, request: "GET /administrator/index.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com", referrer: "https://kocerroxy.com/administrator/"
182.181.231.106 - - [07/Oct/2026:04:22:23 +0000] "GET /administrator/index.php HTTP/1.1" 404 47 "https://kocerroxy.com/administrator/" "Mozilla/5.0 (iPhone; CPU iPhone OS 19_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 Safari Line/15.0.2"
2026/10/07 04:22:26 [error] 3996601#3996601: *61160 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 182.181.231.106, server: kocerroxy.com, request: "GET /wp-login.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
182.181.231.1
...
show less
Web App Attack
🇮🇳
20.197.26.46
20 hours ago
2026/10/07 04:10:49 [error] 3996140#3996140: *60353 FastCGI sent in stderr: "Primary script unknown" ...
show more
2026/10/07 04:10:49 [error] 3996140#3996140: *60353 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.197.26.46, server: kocerroxy.com, request: "GET /admin.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
20.197.26.46 - - [07/Oct/2026:04:10:49 +0000] "GET /admin.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
2026/10/07 04:10:49 [error] 3996140#3996140: *60353 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.197.26.46, server: kocerroxy.com, request: "GET /goods.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
20.197.26.46 - - [07/Oct/2026:04:10:49 +0000] "GET /goods.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, li
...
show less
Web App Attack
🇺🇸
74.7.228.195
20 hours ago
2026/10/07 03:59:55 [error] 3993553#3993553: *59662 FastCGI sent in stderr: "Primary script unknown" ...
show more
2026/10/07 03:59:55 [error] 3993553#3993553: *59662 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 74.7.228.195, server: kocerroxy.com, request: "GET /n.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "adminpanel.kocerroxy.com"
74.7.228.195 - - [07/Oct/2026:03:59:55 +0000] "GET /n.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot"
2026/10/07 04:00:15 [error] 3993553#3993553: *59668 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 74.7.228.195, server: kocerroxy.com, request: "GET /groud3.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "adminpanel.kocerroxy.com"
74.7.228.195 - - [07/Oct/2026:04:00:15 +0000] "GET /groud3.php HTTP/1.1"
...
show less
Web App Attack
🇺🇸
74.7.229.148
21 hours ago
74.7.229.148 - - [07/Oct/2026:03:25:12 +0000] "GET /ton.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Macin ...
show more
74.7.229.148 - - [07/Oct/2026:03:25:12 +0000] "GET /ton.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot"
2026/10/07 03:31:58 [error] 3992211#3992211: *56757 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 74.7.229.148, server: kocerroxy.com, request: "GET /xz.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "app.kocerroxy.com"
74.7.229.148 - - [07/Oct/2026:03:31:58 +0000] "GET /xz.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot"
2026/10/07 03:40:08 [error] 3992212#3992212: *57282 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, clie
...
show less
Web App Attack
🇲🇽
158.23.176.177
21 hours ago
2026/10/07 03:24:46 [error] 3991872#3991872: *56307 FastCGI sent in stderr: "Primary script unknown" ...
show more
2026/10/07 03:24:46 [error] 3991872#3991872: *56307 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 158.23.176.177, server: kocerroxy.com, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "app.kocerroxy.com"
158.23.176.177 - - [07/Oct/2026:03:24:46 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 47 "-" "-"
2026/10/07 03:24:46 [error] 3991872#3991872: *56307 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 158.23.176.177, server: kocerroxy.com, request: "GET /this_is_a_new_hello_world.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "app.kocerroxy.com"
158.23.176.177 - - [07/Oct/2026:03:24:46 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 47 "-" "-"
2026/10/07 03:24:47 [error] 3991872#3991872:
...
show less
Web App Attack
🇵🇱
178.211.139.240
21 hours ago
2026/10/07 03:23:36 [error] 3989208#3989208: *56058 FastCGI sent in stderr: "Primary script unknown" ...
show more
2026/10/07 03:23:36 [error] 3989208#3989208: *56058 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 178.211.139.240, server: kocerroxy.com, request: "GET /filefuns.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
178.211.139.240 - - [07/Oct/2026:03:23:36 +0000] "GET /filefuns.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
2026/10/07 03:23:55 [error] 3989208#3989208: *56058 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 178.211.139.240, server: kocerroxy.com, request: "GET /txets.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
178.211.139.240 - - [07/Oct/2026:03:23:55 +0000] "GET /txets.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWeb
...
show less
Web App Attack
🇺🇸
74.7.229.92
22 hours ago
2026/10/07 02:53:59 [error] 3988162#3988162: *53654 FastCGI sent in stderr: "Primary script unknown" ...
show more
2026/10/07 02:53:59 [error] 3988162#3988162: *53654 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 74.7.229.92, server: kocerroxy.com, request: "GET /index/zwso.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "app.kocerroxy.com"
74.7.229.92 - - [07/Oct/2026:02:53:59 +0000] "GET /index/zwso.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot"
2026/10/07 02:57:13 [error] 3988834#3988834: *53818 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 74.7.229.92, server: kocerroxy.com, request: "GET /shellalfa.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "app.kocerroxy.com"
74.7.229.92 - - [07/Oct/2026:02:57:13 +0000] "GET /shellalfa.php HTT
...
show less
Web App Attack
🇺🇸
74.7.229.176
22 hours ago
2026/10/07 02:51:41 [error] 3988162#3988162: *53509 FastCGI sent in stderr: "Primary script unknown" ...
show more
2026/10/07 02:51:41 [error] 3988162#3988162: *53509 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 74.7.229.176, server: kocerroxy.com, request: "GET /cdc.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
74.7.229.176 - - [07/Oct/2026:02:51:41 +0000] "GET /cdc.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot"
2026/10/07 02:53:42 [error] 3988162#3988162: *53509 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 74.7.229.176, server: kocerroxy.com, request: "GET /ffl.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
74.7.229.176 - - [07/Oct/2026:02:53:42 +0000] "GET /ffl.php HTTP/1.1" 404 47 "-" "Mozilla/5.0
...
show less
Web App Attack
🇺🇸
74.7.228.249
22 hours ago
74.7.228.249 - - [07/Oct/2026:02:37:13 +0000] "GET /ws61.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Maci ...
show more
74.7.228.249 - - [07/Oct/2026:02:37:13 +0000] "GET /ws61.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot"
2026/10/07 02:43:56 [error] 3985770#3985770: *52934 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 74.7.228.249, server: kocerroxy.com, request: "GET /wpxml.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "adminpanel.kocerroxy.com"
74.7.228.249 - - [07/Oct/2026:02:43:56 +0000] "GET /wpxml.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot"
2026/10/07 02:48:47 [error] 3988118#3988118: *53345 FastCGI sent in stderr: "Primary script unknown" while reading response header from
...
show less
Web App Attack
🇺🇸
74.7.229.118
22 hours ago
2026/10/07 02:41:22 [error] 3985771#3985771: *52707 FastCGI sent in stderr: "Primary script unknown" ...
show more
2026/10/07 02:41:22 [error] 3985771#3985771: *52707 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 74.7.229.118, server: kocerroxy.com, request: "GET /wpuse.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
74.7.229.118 - - [07/Oct/2026:02:41:22 +0000] "GET /wpuse.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot"
2026/10/07 02:45:08 [error] 3985770#3985770: *53064 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 74.7.229.118, server: kocerroxy.com, request: "GET /moon.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
74.7.229.118 - - [07/Oct/2026:02:45:08 +0000] "GET /moon.php HTTP/1.1" 404 47 "-" "Mozil
...
show less
Web App Attack
🇩🇪
159.195.6.192
22 hours ago
2026-10-07T02:36:00.723823+00:00 kocer-main-webserver sshd[3986774]: Invalid user admin from 159.195 ...
show more
2026-10-07T02:36:00.723823+00:00 kocer-main-webserver sshd[3986774]: Invalid user admin from 159.195.6.192 port 39202
2026-10-07T02:36:31.964209+00:00 kocer-main-webserver sshd[3986844]: Invalid user user from 159.195.6.192 port 33528
2026-10-07T02:37:34.817289+00:00 kocer-main-webserver sshd[3986937]: Invalid user user from 159.195.6.192 port 51400
...
show less
Brute-Force
SSH
🇦🇺
13.70.107.184
22 hours ago
2026/10/07 02:25:46 [error] 3984680#3984680: *51582 FastCGI sent in stderr: "Primary script unknown" ...
show more
2026/10/07 02:25:46 [error] 3984680#3984680: *51582 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 13.70.107.184, server: kocerroxy.com, request: "GET /gettest.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
13.70.107.184 - - [07/Oct/2026:02:25:46 +0000] "GET /gettest.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
2026/10/07 02:25:47 [error] 3984680#3984680: *51582 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 13.70.107.184, server: kocerroxy.com, request: "GET /gg.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
13.70.107.184 - - [07/Oct/2026:02:25:47 +0000] "GET /gg.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML,
...
show less
Web App Attack
🇺🇸
136.66.23.113
22 hours ago
2026/10/07 02:13:45 [error] 3981266#3981266: *50509 access forbidden by rule, client: 136.66.23.113, ...
show more
2026/10/07 02:13:45 [error] 3981266#3981266: *50509 access forbidden by rule, client: 136.66.23.113, server: kocerroxy.com, request: "GET /.vite/manifest.json HTTP/1.1", host: "kocerroxy.com"
2026/10/07 02:13:45 [error] 3981266#3981266: *50509 access forbidden by rule, client: 136.66.23.113, server: kocerroxy.com, request: "GET /dist/.vite/manifest.json HTTP/1.1", host: "kocerroxy.com"
2026/10/07 02:13:45 [error] 3981267#3981267: *50535 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 136.66.23.113, server: kocerroxy.com, request: "POST /icecoder/lib/terminal-xhr.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
136.66.23.113 - - [07/Oct/2026:02:13:45 +0000] "POST /icecoder/lib/terminal-xhr.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
2026/10/07 02:13:46 [error] 3981266#3981266: *50552 FastCGI sent in stderr: "Primary script unknown"
...
show less
Web App Attack